Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-23835. PoCs published by boku.
AI-analyzed exploit summary This is a functional proof-of-concept exploit for a reflected XSS vulnerability in Tailor Management System 1.0. It generates a malicious URL that, when visited by a victim, logs keystrokes and sends them to an attacker-controlled server via a socket listener.
Description
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
Exploits (1)
This is a functional proof-of-concept exploit for a reflected XSS vulnerability in Tailor Management System 1.0. It generates a malicious URL that, when visited by a victim, logs keystrokes and sends them to an attacker-controlled server via a socket listener.
References (2)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L